GMER 2.1.19155 - http://www.gmer.net Rootkit scan 2013-03-21 02:03:42 Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-1 TOSHIBA_ rev.MF00 465.76GB Running: nx7ntie2.exe; Driver: C:\Users\iwona\AppData\Local\Temp\awrcrpow.sys ---- User code sections - GMER 2.1 ---- .text C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe[3744] C:\Windows\system32\kernel32.dll!LoadLibraryW 0000000076836f80 5 bytes JMP 0000000162424000 .text C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe[3744] C:\Windows\system32\kernel32.dll!LoadLibraryA 0000000076837070 5 bytes JMP 0000000162423ef4 .text C:\Users\iwona\Desktop\nx7ntie2.exe[6812] C:\Windows\syswow64\USER32.dll!DialogBoxParamW 00000000766ccfca 5 bytes JMP 0000000173ff4620 .text C:\Users\iwona\Desktop\nx7ntie2.exe[6812] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69 0000000074ab1465 2 bytes [AB, 74] .text C:\Users\iwona\Desktop\nx7ntie2.exe[6812] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155 0000000074ab14bb 2 bytes [AB, 74] .text ... * 2 ---- User IAT/EAT - GMER 2.1 ---- IAT C:\Windows\system32\mfevtps.exe[2684] @ C:\Windows\system32\CRYPT32.dll[KERNEL32.dll!LoadLibraryA] [13f38c0c0] C:\Windows\system32\mfevtps.exe ---- EOF - GMER 2.1 ----